Role Overview
The Vulnerability Scanning Senior Lead is a key role responsible for ensuring global operational coverage and driving end-to-end strategic technology enablement for the Vulnerability Identification program.
Key Responsibilities
- Responsible taking part in providing global operational coverage (Follow-the-Sun) for vulnerability identification, inclusive of potential On-Call Involvement.
- Execute automated and custom scan routines to detect infrastructure vulnerabilities.
- Participate in incident response activities in collaboration with control owners and remediation teams.
- Involvement in the Development and Execution of the technology strategy for vulnerability identification.
- Conduct proof-of-concept testing for next-gen scanning technologies.
- Optimize and ensure resiliency of scanning platforms.
- Identify and map vulnerability detection gaps to appropriate technology solutions.
- Maintain strong relationships with vendors and implementation partners.
- Track, resolve, and report on technology-based thematic issues.
Required Skills & Experience
- Advanced hands-on experience with industry leading vulnerability identification scanning Solutions (Qualys and Tenable, including custom query development.
- Proven ability to integrate scanning tools with workflow platforms (ServiceNow).
- Strong understanding of vulnerability management concepts and terminology.
- Excellent prioritization, communication, and mentoring skills.
Preferred Qualifications
- BS/MS in Information Technology, Cybersecurity, or related field.
- Familiarity with MITRE ATT&CK, cloud-based scanning, and compliance frameworks (NIST, FFIEC).
- Experience with vulnerability rating methodologies.
- Background in Windows and UNIX administration.
- Proficiency in scripting languages (Python, PowerShell, Bash).